What is the Cyprus IP Box?

The Cyprus IP Box is a tax regime that allows a Cyprus tax-resident company to deduct 80% of the net qualifying profit it earns from qualifying intellectual property. The remaining 20% is taxed at the ordinary corporate rate, which has been 15% since 1 January 2026. Twenty per cent of profit taxed at fifteen per cent produces an effective rate of approximately 3%.

It is codified in Article 9(1)(l) of the Cyprus Income Tax Law N.118(I)/2002, and the 2026 tax reform left it unchanged.

That is the whole mechanism in three sentences. Everything else is about which assets count, which income counts, and how much of it qualifies, and those three questions are where the real answer lives.

Which assets qualify

A qualifying intangible asset is one that was acquired, developed or exploited by a person in the course of business, that results from research and development activity, and in which the person holds ownership, including cases where only economic ownership exists.

In practice the qualifying list covers:

• Patents, including Cyprus patents, European Patent Office patents, and PCT applications at national phase
• Copyrighted software, which is the limb that matters to most technology businesses
• Utility models
• Plant variety rights
• Non-obvious, useful and novel intellectual property certified as such by a competent authority, subject to size thresholds

The exclusions are just as important, and they are absolute rather than a matter of degree:

• Trademarks and brand names
• Image rights
• Customer lists
• Marketing intangibles generally
• Franchise or licensing fees paid primarily for use of a brand
• Know-how that is not the result of research and development

Read those two lists together and the regime's intent is unmistakable. It rewards the creation of technology. It does nothing at all for the marketing of it. A business whose value sits in a brand rather than a codebase is looking at the wrong regime, and no amount of structuring changes that.

Why copyrighted software is the important word

Most preferential IP regimes around the world attach to patents. The UK Patent Box does, and so do several others, which is why they tend to be used by pharmaceutical and engineering companies rather than by software businesses.

Software is protected by copyright automatically, from the moment it is written. Patents cost money, take years, and in Europe software as such is excluded from patentability unless it makes a technical contribution beyond the running of the program. So most software companies have never filed one, and have no intention of doing so.

By including copyrighted software in its qualifying list, Cyprus made its regime usable by the businesses that generate most of the software profit in Europe. That single drafting decision is why a SaaS company can look at this regime at all.

Which income counts

Qualifying profit is not the company's whole profit. It is the profit attributable to the qualifying asset, and it comes from four sources:

Royalties received for the use of the qualifying asset.

Embedded income, meaning income from the asset that is bundled into the price of a product or service rather than invoiced separately. This is the limb that makes the regime workable for subscription software, where no customer is paying a line-item licence fee. Without it, the vast majority of SaaS revenue would fall outside the regime on a technicality.

Gains on disposal of a qualifying asset.

Amounts received in respect of the asset, including certain compensation and insurance receipts.

It is net qualifying profit that the 80% deduction applies to, so costs attributable to the asset are deducted first. The regime rewards profit, not turnover.

How the nexus rule decides the benefit

This is the part that separates the honest description from the marketing one.

After the OECD's work on harmful tax practices under BEPS Action 5, every surviving IP regime had to adopt the modified nexus approach. The principle is simple: a jurisdiction may only give a preferential rate to the extent that the taxpayer itself carried out the research and development that created the asset. A country cannot offer a low rate on income from intellectual property that was developed somewhere else and moved in.

The consequence for a Cyprus claim is that the qualifying share of profit tracks qualifying expenditure. Expenditure on research and development the Cyprus company carries out itself, or outsources to unrelated third parties, counts toward the qualifying share. Two categories do not: the cost of acquiring an existing asset, and development recharged from related companies outside Cyprus.

Note the nuance, because it is routinely stated wrongly. An acquired asset can still be a qualifying asset; the definition explicitly contemplates assets that were acquired. What acquisition does is enter the denominator without entering the numerator, which reduces the qualifying share and moves the effective rate up. Buying IP in does not disqualify you. It dilutes you.

This is also why approximately 3% is properly described as a floor rather than a promise. Three per cent is what the regime produces when the qualifying share is at or near its maximum. A smaller qualifying share moves the effective rate up toward the headline 15%, never down.

What substance has to do with it

Nexus is a test about expenditure, not a test about geography, and those are frequently confused. But the two connect, because the expenditure has to be genuinely the Cyprus company's.

For the Cyprus company to be funding and controlling development, it has to be capable of doing so. In practice that means a resident technical lead and a core engineering team approving releases locally, board control exercised on the island and minuted there, and intra-group pricing set at arm's length and documented before anybody asks for it.

This is where the regime stops being a tax question and becomes an operating one. It is also where most of the cost sits, and why the arithmetic does not work for every company. Below a certain level of qualifying profit, the cost of building a genuine operation exceeds the tax saved, and the honest answer is that the regime is not for you yet.

What it is worth

On EUR 1m of qualifying IP profit, tax at the standard 15% rate would be EUR 150,000. Under the IP Box, approximately 3% on that profit is around EUR 30,000. The difference, roughly EUR 120,000 a year, stays in the company.

Two things about that figure. It is retention by the company, not money in a shareholder's pocket: Cyprus levies no withholding tax on dividends to non-resident shareholders, but the shareholder's own country of residence may tax the dividend on receipt, and that has to be tested against where the owner actually lives. And it assumes the whole EUR 1m qualifies, which is exactly the assumption the nexus calculation exists to test.

How it interacts with the global minimum tax

Under OECD Pillar Two, groups with consolidated revenue above EUR 750m face a 15% minimum effective rate, and a jurisdiction charging less may see the difference topped up elsewhere. Companies below that threshold are outside the rules and keep the IP Box position undisturbed.

That threshold is the reason Cyprus raised its corporate rate from 12.5% to 15% in the 2026 reform rather than defending the lower rate. It is also why the IP Box effective rate moved from about 2.5% to about 3%: the deduction did not change, the rate underneath it did. Anyone still quoting 2.5% is quoting the pre-reform figure.

How a claim is actually made

The regime is not something you opt into with a tick box. A claim is assembled from records that have to exist before the claim does.

Identify the qualifying asset. Not "our software" as a general proposition, but the specific asset or family of assets the claim relates to. A company with a platform, a separate analytics engine and a white-label product may be looking at three.

Track expenditure per asset. The nexus calculation needs qualifying expenditure and total expenditure for each one, which means the accounting has to distinguish development spend by asset from the day the regime is relied on. Reconstructing it two years later from timesheets and invoices is possible, expensive, and weaker than having it contemporaneously.

Separate qualifying income from the rest. Service revenue, implementation fees, marketing income and support contracts sit outside the regime and are taxed at 15% on profit after costs. Keeping the two apart is a documentation exercise that runs continuously rather than at year end.

Price intra-group arrangements at arm's length. Where the Cyprus company licenses the asset to an operating company in the group, the charge has to be what an independent supplier would charge, supported by a benchmarking file. That file is prepared by tax advisers, not by a corporate services provider, and it is refreshed rather than written once.

Obtain a formal opinion before implementation. The position is set out by a regulated Cyprus tax advisor on your facts. An advance tax ruling can be sought where the circumstances warrant it.

The questions worth asking before you go further

Four, in the order that decides the answer fastest.

Does the company own an asset on the qualifying list? If the value is in a brand, a customer base or commercial know-how rather than in code or a patent, the answer is no and nothing after this matters.

Did the company fund the development? Not the founder personally, not another group company outside Cyprus, and not a previous owner you bought it from. Who paid, and where the work happened, determines the qualifying share.

Can the income be traced to the asset? Licence and royalty income traces easily. Embedded income in a subscription needs a defensible basis for attributing part of the price to the asset.

Is the profit large enough to carry a real operation? A resident technical lead, an engineering team, an office, audit and advisers cost money every year, and they are the condition rather than an optional extra. The regime rewards companies that would find those costs reasonable at their scale, and it punishes ones that would not by producing a structure that fails on substance.

What the regime is not

It is not an offshore arrangement. A Cyprus company is EU-resident, files audited accounts, and pays tax at a published rate, which is precisely why banks and payment providers will accept it as a counterparty when they will refuse an entity from a jurisdiction the correspondent chain has decided against.

It is not a loophole. It is an incentive written into statute, retained after an international review that closed a great many similar regimes, and built on a standard the OECD designed specifically to make sure the benefit follows real research and development.

And it is not automatic. The rate depends on facts that vary company by company: what the asset is, where the development happened, who paid for it, and whether the operation behind it is real. The position that applies to any particular company is set out by a regulated Cyprus tax advisor in a formal opinion, before anything is built around it.